Jump to content


Photo

IPv6 deployment delay


  • This topic is locked This topic is locked
25 replies to this topic

#1 Staff

Staff

    Advanced Member

  • Staff
  • PipPipPip
  • 7333 posts

Posted 02 January 2018 - 10:51 AM

THIS THREAD IS NOW OBSOLETE - PLEASE JUMP HERE: https://airvpn.org/topic/25148-ipv6-support-experimental-phase/

 

Hello!

We regret to inform you that IPv6 full support has been delayed. Here is the current, new roadmap for IPv6 support deployment in our infrastructure:

 

Within 15.Jan.18:

 

- at least one public VPN server supporting IPv6

- release of new Eddie version which fully supports IPv6 routing and any other necessary function

 

If no problems arise, or when unexpected problems are resolved, deployment of IPv6 on all the other VPN servers which are in an IPv6 capable network (i.e. the overwhelming majority in our infrastructure - only 2% of the servers will not support IPv6 due to technical limitations of the datacenter they are in). Such a wide scale deployment will be very fast (a matter of a day or two a few days).

 

We apologize for the inconvenience. We are well aware that full IPv6 support for the end of December 2017 had been planned since 2016 and we'll do our best to minimize the delay.

 

Kind regards and datalove

AirVPN Staff



#2 zombie1982

zombie1982

    Advanced Member

  • Members
  • PipPipPip
  • 35 posts

Posted 02 January 2018 - 12:02 PM

Never mind :)  Take your time, savety first ;)



#3 catyakspa

catyakspa

    Newbie

  • Members
  • Pip
  • 5 posts

Posted 02 January 2018 - 05:08 PM

Out of curiosity, what is the problem preventing IPv6 deployment?



#4 NaDre

NaDre

    Advanced Member

  • Members
  • PipPipPip
  • 413 posts

Posted 02 January 2018 - 06:07 PM

Out of curiosity, what is the problem preventing IPv6 deployment?

My guess is that the main issue is how to adapt the various "advanced" features of Eddie to IPv6. Those of us who do not use Eddie would probably be happy to see them just get the servers up, which would probably not be so much effort, as you appear to have surmised. And they could worry about Eddie later. But they are probably concerned that that would upset too many customers. All of this is of course speculation on my part.

#5 OmniNegro

OmniNegro

    Advanced Member

  • Members
  • PipPipPip
  • 277 posts
  • LocationThe Fiery Pits of Texas, USA.

Posted 02 January 2018 - 06:22 PM

For those who do not already know, IPv6 is a really messed up solution to the limitations of IPv4. In fact, it causes many privacy related problems that are very complex to fix for a VPN. The only reason IPv6 was made in the first place was as a solution to the 4 billion IPs available under IPv4. (Imagine how many of the 7 billion people in this world use more than one IP at a time and the problem becomes apparent.)

 

So we can then go read up on IPv6 and see that when it was drafted, it included things that are plainly bad for our privacy. And in addition, most of the Internet works just fine on IPv4 alone.

 

https://en.wikipedia.org/wiki/IPv6


Debugging is at least twice as hard as writing the program in the first place.

So if you write your code as clever as you can possibly make it, then by definition you are not smart enough to debug it.


#6 go558a83nk

go558a83nk

    Advanced Member

  • Members
  • PipPipPip
  • 1540 posts

Posted 02 January 2018 - 06:36 PM

Clodo mentioned one of the reasons for the delay in another thread.  It seems some of the problem is not AirVPN's fault at all but rather a lack of capability of openvpn.  Thus Air has to workaround.



#7 Snowplow

Snowplow

    Newbie

  • Members
  • Pip
  • 5 posts

Posted 02 January 2018 - 07:58 PM

Thanks for the update.

 

While I often see the mention of Eddie and issues relating to OpenVPN support --> what about mobile users on OpenVPN?  It's not clear to me whether the ipv6 support is limited to Eddie as a client or also supports OpenVPN on mobile phones.  I'm limited in which mobile carriers I can use based on their conversion to ipv6, hence my interest.  :)

 

Happy New Year!



#8 NaDre

NaDre

    Advanced Member

  • Members
  • PipPipPip
  • 413 posts

Posted 02 January 2018 - 08:40 PM

Clodo mentioned one of the reasons for the delay in another thread.  It seems some of the problem is not AirVPN's fault at all but rather a lack of capability of openvpn.  Thus Air has to workaround.

 
I would not say "a lack of capability of openvpn". It was a deliberate choice by the OpenVPN team, I think.
 
For IPv4, OpenVPN had some helper/convenience features that were not strictly required - e.g. the option "net_gateway" for the directive "--route", and the environment variable "route_net_gateway". There is no direct translation of these to IPv6. You would have to think in terms of the interface instead. It seems that the OpenVPN team have decided they do not want to go down the road of having helper stuff for IPv6. One can do all that is necessary in some wrapper code, if one wants some unusual routing.
 
I suppose the question could also be asked about what impact the implementation IPv6 will have on the "micro-routing" that AirVPN does. This will be another source of additional work I would say.

#9 Staff

Staff

    Advanced Member

  • Staff
  • PipPipPip
  • 7333 posts

Posted 02 January 2018 - 08:51 PM

Out of curiosity, what is the problem preventing IPv6 deployment?

 

Hello!

Eddie is late in development, for a combination of adverse causes which we are going to list here below. On the server side, OpenVPN has been properly patched and tested. Some parts of code have been rewritten properly to provide a real IPv6 full support (task completed successfully by berserker).

 

@NaDre: currently micro-routing in IPv6 is not fully implemented. It will probably come later.

 

Eddie is late mainly because:

 

  • the ISP lines supporting IPv6 which are available to our developers malfunction often. IPv6 goes down frequently. Only in December, the devs reported an IPv6 black out of several days without interruption! Such events force the developers to perform any test remotely, between servers in which IPv6 works properly, and the consequence is a delay in development (one thing is testing from your office and house directly with IPv6, one thing is testing remotely via IPv4 connections controlling remotely IPv6 supporting machines in which you run any new Eddie alpha version). This is a dramatic infrastructural/ISP configuration problem in Italy which we have no control on, of course. We can't even rely on multiple ISPs because a pure IPv6 support is currently not provided by most of italian ISPs.
  • we have had a nasty problem which causes a malfunction with usage of IPv6 (in the VPN) from an IPv4 only line. This problem is "nasty" because it occurs only on Windows 7, 8, 10, while on OS X, macOS and GNU/Linux Eddie works just fine with the very same pieces of code. As a consequence, troubleshooting this issue has been time consuming - we want to publish an Eddie version which works on all supported platforms, we don't want to leave Windows behind for obvious reasons

Kind regards



#10 Staff

Staff

    Advanced Member

  • Staff
  • PipPipPip
  • 7333 posts

Posted 02 January 2018 - 09:06 PM

Thanks for the update.

 

While I often see the mention of Eddie and issues relating to OpenVPN support --> what about mobile users on OpenVPN?  It's not clear to me whether the ipv6 support is limited to Eddie as a client or also supports OpenVPN on mobile phones.  I'm limited in which mobile carriers I can use based on their conversion to ipv6, hence my interest.  :)

 

Happy New Year!

 

Hello and Happy New Year to you too!

 

IPv6 support on server side will be available regardless of the software client used to connect to our VPN servers. We can't categorically rule out that some clients might have problems. We hope not (and we will be testing as soon as our ISPs in Italy provide us with a more decent IPv6 support), but in any case (hear, hear!) we are willing to release Eddie for Android within July 2018 with a lot (if not all!) of the features you find in Eddie for desktop systems.

 

The problem you mention is serious and we think that it might become a widespread issue for mobile users in several countries in 2019. This is the main driving force which convinced AirVPN management to speed up implementation of IPv6 support. Going back to 2014, IPv6 support was vaguely road-mapped for 2019/2020. The decision to "put the deadline 2 years back" was proposed in late 2016 and approved unanimously soon after.

 

Kind regards



#11 Snowplow

Snowplow

    Newbie

  • Members
  • Pip
  • 5 posts

Posted 03 January 2018 - 03:57 AM

Hello and Happy New Year to you too!

 

IPv6 support on server side will be available regardless of the software client used to connect to our VPN servers. We can't categorically rule out that some clients might have problems. We hope not (and we will be testing as soon as our ISPs in Italy provide us with a more decent IPv6 support), but in any case (hear, hear!) we are willing to release Eddie for Android within July 2018 with a lot (if not all!) of the features you find in Eddie for desktop systems.

 

The problem you mention is serious and we think that it might become a widespread issue for mobile users in several countries in 2019. This is the main driving force which convinced AirVPN management to speed up implementation of IPv6 support. Going back to 2014, IPv6 support was vaguely road-mapped for 2019/2020. The decision to "put the deadline 2 years back" was proposed in late 2016 and approved unanimously soon after.

 

Kind regards

 

Thank you for the information.  Exciting to hear about Eddie for Android....is there any similar plan on the iOS platform?  I'd be surprised given their tight control, but one can hope, as I don't find iOS handles VPN very well, such as lack of a network lock.  :)



#12 Clodo

Clodo

    AirVPN Team

  • Staff
  • PipPipPip
  • 282 posts
  • LocationItaly

Posted 03 January 2018 - 10:59 AM

For IPv4, OpenVPN had some helper/convenience features that were not strictly required - e.g. the option "net_gateway" for the directive "--route", and the environment variable "route_net_gateway". There is no direct translation of these to IPv6. You would have to think in terms of the interface instead. It seems that the OpenVPN team have decided they do not want to go down the road of having helper stuff for IPv6. One can do all that is necessary in some wrapper code, if one wants some unusual routing.

Yes, this is an example. Eddie has options related to what routes can go inside or outside the tunnel, based on "net_gateway" and "vpn_gateway" params of 'route' directive.
For IPv6 we need to reimplement the routing-table changes directly from Eddie, for every OS we support.

Another example, with a server-side directive

push "redirect-gateway ipv6 def1 bypass-dhcp"

any 2.3 client throws a "unknown push option 'ipv6'" as fatal error, and it's not possible to apply directives based on client version. We implemented a specific patch (only server-side) for this.



#13 air_is_nice

air_is_nice

    Advanced Member

  • Members
  • PipPipPip
  • 42 posts

Posted 03 January 2018 - 05:52 PM

For IPv4, OpenVPN had some helper/convenience features that were not strictly required - e.g. the option "net_gateway" for the directive "--route", and the environment variable "route_net_gateway". There is no direct translation of these to IPv6. You would have to think in terms of the interface instead. It seems that the OpenVPN team have decided they do not want to go down the road of having helper stuff for IPv6. One can do all that is necessary in some wrapper code, if one wants some unusual routing.

Yes, this is an example. Eddie has options related to what routes can go inside or outside the tunnel, based on "net_gateway" and "vpn_gateway" params of 'route' directive.
For IPv6 we need to reimplement the routing-table changes directly from Eddie, for every OS we support.

Another example, with a server-side directive

>push "redirect-gateway ipv6 def1 bypass-dhcp"

any 2.3 client throws a "unknown push option 'ipv6'" as fatal error, and it's not possible to apply directives based on client version. We implemented a specific patch (only server-side) for this.

 

 

@Clodo! How is Eddie 3 going? Is there any time-frame (this year?)? I want to be able to minimize to system-tray on linux..



#14 5YmkoLQZ

5YmkoLQZ

    Advanced Member

  • Members
  • PipPipPip
  • 173 posts

Posted 05 January 2018 - 12:38 AM

Are the tls-crypt modes/protocols also coming with this as you said here?

 

https://airvpn.org/topic/24547-are-we-going-to-get-ipv6-support-by-new-years/#entry67770



#15 Staff

Staff

    Advanced Member

  • Staff
  • PipPipPip
  • 7333 posts

Posted 05 January 2018 - 10:40 AM

Are the tls-crypt modes/protocols also coming with this as you said here?

 

https://airvpn.org/topic/24547-are-we-going-to-get-ipv6-support-by-new-years/#entry67770

 

Hello!

 

Yes.

 

Kind regards



#16 Clodo

Clodo

    AirVPN Team

  • Staff
  • PipPipPip
  • 282 posts
  • LocationItaly

Posted 09 January 2018 - 01:38 PM

@Clodo! How is Eddie 3 going? Is there any time-frame (this year?)? I want to be able to minimize to system-tray on linux..

"When it's done" :P . In this year, of course.

Minimize in system-tray on Linux will be available in the next 2.x series, around the next week.

#17 willowbrook

willowbrook

    Advanced Member

  • Members
  • PipPipPip
  • 69 posts

Posted 15 January 2018 - 06:41 AM

Thanks for the update.

 

While I often see the mention of Eddie and issues relating to OpenVPN support --> what about mobile users on OpenVPN?  It's not clear to me whether the ipv6 support is limited to Eddie as a client or also supports OpenVPN on mobile phones.  I'm limited in which mobile carriers I can use based on their conversion to ipv6, hence my interest.  :)

 

Happy New Year!

Hello and Happy New Year to you too!

 

IPv6 support on server side will be available regardless of the software client used to connect to our VPN servers. We can't categorically rule out that some clients might have problems. We hope not (and we will be testing as soon as our ISPs in Italy provide us with a more decent IPv6 support), but in any case (hear, hear!) we are willing to release Eddie for Android within July 2018 with a lot (if not all!) of the features you find in Eddie for desktop systems.

 

The problem you mention is serious and we think that it might become a widespread issue for mobile users in several countries in 2019. This is the main driving force which convinced AirVPN management to speed up implementation of IPv6 support. Going back to 2014, IPv6 support was vaguely road-mapped for 2019/2020. The decision to "put the deadline 2 years back" was proposed in late 2016 and approved unanimously soon after.

 

Kind regards

Can't wait for Android! You guys rock



#18 air_is_nice

air_is_nice

    Advanced Member

  • Members
  • PipPipPip
  • 42 posts

Posted 22 January 2018 - 04:24 PM

So, any news regarding this? 15 of January is long gone.



#19 Staff

Staff

    Advanced Member

  • Staff
  • PipPipPip
  • 7333 posts

Posted 22 January 2018 - 08:32 PM

So, any news regarding this? 15 of January is long gone.

 

Hello!

We're sorry for the additional delay. We will publish an official announcement in the next 24/48 hours

 

Kind regards



#20 5YmkoLQZ

5YmkoLQZ

    Advanced Member

  • Members
  • PipPipPip
  • 173 posts

Posted 25 January 2018 - 10:45 AM

So, any news regarding this? 15 of January is long gone.

 

Hello!

We're sorry for the additional delay. We will publish an official announcement in the next 24/48 hours

 

Kind regards

 

Hey - I can't seem to find the announcement anywhere, did you publish it?






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

Servers online. Online Sessions: 13825 - BW: 42306 Mbit/sYour IP: 54.81.254.212Guest Access.